Aegis
All events
// Operations

Authentication Success

Kerberos TGT issued for lgarcia from 10.4.12.42 (logon type 3)

EVT-49E1ACInfo

Same principal

Other activity for lgarcia around this time

Hunt
TimeEventSeverityHost
2026-09-02 19:35:08ZAuthentication SuccessInfoWS-FIN-005
2026-09-02 19:45:20ZAuthentication SuccessInfoWS-FIN-003
2026-09-02 19:59:04ZAuthentication SuccessInfoWS-FIN-006
2026-09-02 21:05:34ZAuthentication SuccessInfoWS-FIN-001
2026-09-02 21:06:52ZAuthentication SuccessInfoWS-FIN-001

Same source address

Other activity from 10.4.12.42

TimeEventUserCountry
2026-09-02 20:22:51ZNetwork Allow——
2026-09-02 20:23:32ZCloud Api Callfokoye—
2026-09-02 20:24:53ZNetwork Allow——
2026-09-02 20:43:38ZAuthentication SuccesshlindqvistUSA
2026-09-02 20:58:45ZAuthentication SuccessawhitmoreUSA

Record

Source
WIN-DC01Active Directory
Event type
AUTHENTICATION_SUCCESS
Action
logon
Status
success
Location
Chicago, USA
Observed

Pivot

Every identifier on this record, as a one-click hunt.